socks5systemz | bb4fb13fb61cfb0d0f33b0e3d6f97786f66719fa36259f08ed4f423eebfe59ad | Triage

Submit
Reports

Overview

overview

Static

static

3

bb4fb13fb6...dN.exe

windows7-x64

bb4fb13fb6...dN.exe

windows10-2004-x64

Sharing

General

Target

bb4fb13fb61cfb0d0f33b0e3d6f97786f66719fa36259f08ed4f423eebfe59adN
Size

4.1MB
Sample

241104-gnmk4awckm
MD5

8decfecd3228f64d525f8c00cb399f80
SHA1

8114138cf74562d733758fffb5ce6f88eecd07e2
SHA256

bb4fb13fb61cfb0d0f33b0e3d6f97786f66719fa36259f08ed4f423eebfe59ad
SHA512

b244bad122ab54cba6f8603b0efc7f396b1771651453ea8a0fba6fefd22b286db57314ecf66fb5c8b51bac9d64f981cb2e5335bc48731af6623a588677f24313
SSDEEP

98304:ILdz63zTpGslveI7YUIAf3/JYxF1IcRwEkDw46bhk6Td8bwtibMCi:HDTpGo5IvP1Rw7DSx+sIbMp

Score

10^/10

socks5systemz botnet discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

bb4fb13fb61cfb0d0f33b0e3d6f97786f66719fa36259f08ed4f423eebfe59adN.exe

Resource

win7-20240903-en

socks5systemz botnet discovery

windows7-x64

10 signatures

120 seconds

Behavioral task

behavioral2

Sample

bb4fb13fb61cfb0d0f33b0e3d6f97786f66719fa36259f08ed4f423eebfe59adN.exe

Resource

win10v2004-20241007-en

socks5systemz botnet discovery

windows10-2004-x64

10 signatures

120 seconds

Malware Config

Targets

- Target
  
  bb4fb13fb61cfb0d0f33b0e3d6f97786f66719fa36259f08ed4f423eebfe59adN
- Size
  
  4.1MB
- MD5
  
  8decfecd3228f64d525f8c00cb399f80
- SHA1
  
  8114138cf74562d733758fffb5ce6f88eecd07e2
- SHA256
  
  bb4fb13fb61cfb0d0f33b0e3d6f97786f66719fa36259f08ed4f423eebfe59ad
- SHA512
  
  b244bad122ab54cba6f8603b0efc7f396b1771651453ea8a0fba6fefd22b286db57314ecf66fb5c8b51bac9d64f981cb2e5335bc48731af6623a588677f24313
- SSDEEP
  
  98304:ILdz63zTpGslveI7YUIAf3/JYxF1IcRwEkDw46bhk6Td8bwtibMCi:HDTpGo5IvP1Rw7DSx+sIbMp
Score

10^/10

socks5systemz botnet discovery
- Detect Socks5Systemz Payload
- Socks5Systemz
  Socks5Systemz is a botnet written in C++.
  botnet socks5systemz
- Socks5systemz family
  socks5systemz
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socks5systemzbotnetdiscovery

behavioral2

socks5systemzbotnetdiscovery

© 2018-2025

Terms | Privacy